Search for vulnerabilities
Vulnerability details: VCID-nv96-qrt3-aaar
Vulnerability ID VCID-nv96-qrt3-aaar
Aliases CVE-2011-3940
Summary nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted NSV file that triggers "use of uninitialized streams."
Status Published
Exploitability 0.5
Weighted Severity 6.1
Risk 3.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01023 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01029 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.01051 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
epss 0.02146 https://api.first.org/data/v1/epss?cve=CVE-2011-3940
cvssv2 6.8 https://nvd.nist.gov/vuln/detail/CVE-2011-3940
Reference id Reference type URL
http://ffmpeg.org/
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=5c011706bc752d34bc6ada31d7df2ca0c9af7c6b
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=8fd8a48263ff1437f9d02d7e78dc63efb9b5ed3a
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=c898431ca5ef2a997fe9388b650f658fb60783e5
http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=5c011706bc752d34bc6ada31d7df2ca0c9af7c6b
http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=8fd8a48263ff1437f9d02d7e78dc63efb9b5ed3a
http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=c898431ca5ef2a997fe9388b650f658fb60783e5
http://libav.org/
https://api.first.org/data/v1/epss?cve=CVE-2011-3940
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3940
http://secunia.com/advisories/49089
http://www.debian.org/security/2012/dsa-2471
http://www.ubuntu.com/usn/USN-1479-1
cpe:2.3:a:ffmpeg:ffmpeg:0.7.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.11:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.7.11:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.7.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.7.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.7.8:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.7.9:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.7.9:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.8.10:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.8.5:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.8.6:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.8.7:*:*:*:*:*:*:*
cpe:2.3:a:ffmpeg:ffmpeg:0.8.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:0.8.8:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.5:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.5.1:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.5.2:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.5.3:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.5.4:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.5.5:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.5.6:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.5.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.5.7:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.6:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.6.1:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.6.2:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.6.3:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.6.4:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.6.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.6.5:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.7:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.7.3:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.7.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.7.4:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.8:*:*:*:*:*:*:*
cpe:2.3:a:libav:libav:0.8:beta2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:libav:libav:0.8:beta2:*:*:*:*:*:*
CVE-2011-3940 https://nvd.nist.gov/vuln/detail/CVE-2011-3940
GLSA-201210-06 https://security.gentoo.org/glsa/201210-06
GLSA-201310-12 https://security.gentoo.org/glsa/201310-12
USN-1478-1 https://usn.ubuntu.com/1478-1/
USN-1479-1 https://usn.ubuntu.com/1479-1/
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2011-3940
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.7525
EPSS Score 0.01023
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.